Google Search Console
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
To use the skill, the user must install and trust the ClawLink plugin in their OpenClaw environment.
The skill depends on a separate plugin that is not included in the provided artifact set. The install is user-directed and central to the integration, but users are trusting external plugin code.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the expected ClawHub source and review ClawLink/plugin documentation before granting account access.
Approving the pairing lets OpenClaw use the user's ClawLink connection for Google Search Console actions.
The skill requires pairing a local OpenClaw device with ClawLink and storing a local device credential. This is disclosed and purpose-aligned, but it is still account-level authorization.
The user signs in to ClawLink if needed and approves the OpenClaw device... The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Only approve pairing on a trusted machine, do not paste raw credentials into chat, and revoke the ClawLink connection if no longer needed.
If approved, the agent may change Search Console site or sitemap state for connected properties.
The skill can perform mutating Search Console actions such as submitting sitemaps or adding/removing verified sites. The instructions include preview and confirmation, which keeps this purpose-aligned but still important for users to notice.
For sitemap submissions, site additions or removals, or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user.
Review previews carefully and approve only the specific Search Console changes you intended.
Search Console requests and results may be mediated by ClawLink's hosted service and live tool catalog.
The skill relies on an external integration hub and dynamically listed tools. This is disclosed and expected, but data and actions pass through ClawLink rather than being handled entirely within the skill.
ClawLink provides tools dynamically based on what the user has connected... Execute with `clawlink_call_tool`.
Review ClawLink's privacy, security, and connected-account settings, and keep the Google Search Console connection scoped to what you need.